Terms of Service

These Terms of Service (“Terms”) govern your access to and use of VulnScanners (“VulnScanners,” “we,” “us”), our hosted external vulnerability scanning — Nmap, Nuclei, and OWASP ZAP — and the reports and web application at vulnscanners.com. By creating an account or using the service, you agree to these Terms. If you do not agree, do not use the service.

You must be at least 18 years old and able to enter into a binding contract. If you use the service on behalf of an organization, you represent that you are authorized to bind that organization to these Terms, and “you” refers to that organization.

You may only scan systems, domains, IP addresses, or applications that you own or are explicitly authorized in writing to test. You are solely responsible for obtaining and maintaining that authorization.

You will not use VulnScanners to scan, probe, or attack any target without authorization, to disrupt or overload third-party systems, or for any unlawful purpose. Unauthorized scanning may violate computer-misuse laws — you accept full responsibility for the targets you submit and the legal consequences of doing so.

We may suspend or terminate access, and cooperate with law enforcement, if we reasonably believe you are scanning targets you are not authorized to test.

You are responsible for the activity under your account and for keeping your credentials secure. Notify us promptly of any unauthorized use. Information you provide must be accurate and kept up to date.

Scans are paid for with credits. One credit is consumed per scan, per scanner (Nmap, Nuclei, and OWASP ZAP each draw from their own balance). Credits are purchased through Stripe and do not expire.

A scan that fails automatically refunds its credit. Your first purchase is covered by a 7-day, no-questions-asked refund; after that, we handle issues case by case. Prices and pack sizes may change, but changes will not affect credits you have already purchased.

You will not misuse the service, including by attempting to breach or circumvent our security, reverse-engineer or resell the platform, overload our infrastructure, or use the service to build a competing product. You will comply with all applicable laws and with the acceptable-use expectations described in our Help Center.

VulnScanners reports the findings its scanners observe at the time of a scan. Security scanning is inherently incomplete: a clean result does not guarantee a target is secure, and findings may include false positives. Reports are provided for your assessment and remediation and are not a warranty of security, compliance, or fitness for any particular purpose.

You are responsible for reviewing, validating, and acting on results. VulnScanners is a tool to assist your security program, not a substitute for professional judgment.

Scan targets and results are your confidential data and are used to provide the service to you. Our handling of personal information is described in our Privacy Policy.

The VulnScanners platform, software, and branding are owned by us and protected by intellectual-property laws. We grant you a limited, non-exclusive, non-transferable right to use the service under these Terms. You retain ownership of the reports and data generated for your authorized targets.

VulnScanners relies on third-party providers — including Google Firebase (authentication and storage), Stripe (payments), Resend (email), and Vercel (hosting). Your use may also be subject to their terms. We are not responsible for third-party services outside our control.

The service is provided “as is” and “as available,” without warranties of any kind, whether express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or that it will detect every vulnerability.

To the maximum extent permitted by law, VulnScanners will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, data, or goodwill. Our total liability for any claim relating to the service will not exceed the amount you paid us in the 12 months before the event giving rise to the claim.

You agree to indemnify and hold VulnScanners harmless from any claims, losses, or expenses arising out of your use of the service, your scan targets, your violation of these Terms, or your violation of any law or third-party right — including any claim that you scanned a target you were not authorized to test.

You may stop using the service at any time. We may suspend or terminate your access if you breach these Terms, use the service unlawfully, or create risk or legal exposure for us or others. On termination, your right to use the service ends; sections that by their nature should survive (e.g., authorized-scanning responsibility, disclaimers, limitation of liability, indemnification) will survive.

We may update these Terms from time to time. Material changes will be reflected by updating the effective date above, and where appropriate we will notify you. Continuing to use the service after changes take effect constitutes acceptance.

Questions about these Terms? Email us at support@vulnscanners.com.